php-waf
php-waf copied to clipboard
:guardsman: PHP Web Application Firewall
php-waf
PHP Web Application Firewall
| Build | License |
|---|---|
Requirements
- PHP >= 7.0
Installation
If Composer is not installed on your system yet, you may go ahead and install it using this command line:
$ curl -sS https://getcomposer.org/installer | php
Next, add the following require entry to the composer.json file in the root of your project.
{
"require" : {
"riverside/php-waf" : "*"
}
}
Finally, use Composer to install php-waf and its dependencies:
$ php composer.phar install
How to use
- Configure your web server
- Apache
php_value auto_prepend_file "/path/to/waf.php"- Nginx
fastcgi_param PHP_VALUE "auto_prepend_file=/path/to/waf.php"; - Create an Firewall instance
- waf.php
<?php $waf = new \PhpWaf\Firewall(); $waf->run();
Available filters
| Filter | Description |
|---|---|
| SQL | SQL Injection |
| CRLF | CRLF Injection |
| XSS | Cross-site Scripting |
| XML | XML Attacks |